Cloud Managed Security Appliances

Multi-Site Cloud Management

Meraki’s Cloud Networking architecture enables plug and play branch deployments and provides centralized visibility and control across any number of distributed locations.

MX security appliances self-provision – automatically pulling policies and configuration from the cloud – enabling branch deployments without on-site IT. Meraki’s cloud delivers seamless firmware and security signature updates, automatically establishes site-to-site VPN tunnels, and provides automatic network monitoring and alerts.

Since the MX is managed entirely through Meraki’s web based dashboard, configuration and diagnostics can be performed remotely just as easily as they can be performed on-site, eliminating costly field visits. Even firmware updates are performed seamlessly, over the web.

Auto VPN

Meraki’s unique auto provisioning site-to-site VPN connects branches securely with complete simplicity. Using IPsec over any wide area network, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable.

Site-to-site connectivity is established through a single click in Meraki’s dashboard. Gone are the configuration headaches of traditional site-to-site VPNs: route discovery, key negotiation, authentication, security policies, crypto maps, and access lists are all handled automatically from the cloud.

Ease of use does not come at the expense of flexibility. Both full and split tunnel VPNs can be configured easily. New sites can similarly be added with a few simple clicks.

WAN Optimization

Reduce intersite application bandwidth by up to 99% and accelerate CIFS, FTP, HTTP, and TCP traffic by up to 209x with the MX. A state-of-the-art WAN optimization engine uses advanced algorithms, deduplication, compression, and hard-disk based caching to make the WAN feel like a LAN.

Meraki’s WAN optimization aids in server consolidation and private cloud initiatives, as well as any distributed network where end-user bandwidth costs or performance are a priority. Enable WAN optimization on the MX with just two clicks – without new appliances, training, or overlay systems.

WAN Optimization Estimator

Control Applications, Users, and Devices

The MX was purpose-built for modern, multi-use networks, providing extensive visibility and control over users, content, and applications. Far beyond simple host- and port-based solutions, the MX’s Layer 7 fingerprinting classifies evasive and encrypted applications including P2P. Block unwanted web traffic with CIPA-compliant content filtering, throttle bandwidth hogs like Netflix and BitTorrent, and even prioritize productivity apps like VoIP.

The MX also provides insight into the users on the network, identifying clients by device type (e.g., iPads) and even username. Inspect, throttle, or block users, and integrate with Active Directory to apply different policies to different classes of users.

Smart Link Bonding

Connect your branch with multiple WAN links, e.g., cable, DSL, T1, or even 3G/4G. The MX will automatically combine them into a single LAN, balancing traffic between them and failing over if a connection goes down.

The MX’s Smart Link Bonding increases bandwidth and reduces cost. Supplement a T1 with an affordable DSL connection, increasing bandwidth for video and cloud applications. For maximum cost savings, forgo leased lines altogether by deploying the MX's site-to-site VPN over a combination of DSL, cable or 3G/4G for secure, redundant, inexpensive connectivity.

Application-Aware Firewall

An integrated application-aware stateful firewall secures your network from malicious entities threatening today's networks. It's no longer enough to simply block protocols, hosts, and ports – a firewall must also be user, content, and application aware.

Use custom inbound and outbound rules to secure your network, allowing only approved, essential services and connections. Create custom VLAN routing configurations to segregate voice, video, and data traffic. Deploy global firewall rules across site-to-site VPN networks with a single click.

Content Filtering

The MX’s CIPA compliant content filter enables administrators to block categories of content (adult, drugs, gambling, etc.) as well as individual URLs. Active Directory integration allows for different content filtering policies for different groups of users.

Through an intuitive web interface with Google-like auto suggest, it takes only minutes to configure filtering policies. Once deployed, the MX automatically refreshes its filtering lists from the cloud, so that your rules are always up to date, even as websites change.

Branch Routing

The MX provides a complete networking solution, with a host of networking services for branch environments. Manage IP addresses with built-in DHCP and NAT. Enforce DMZs, punch firewall holes in seconds, segregate traffic with VLANs, and create routes through an intuitive web interface.

Networking features integrate seamlessly with site to site VPN, stateful firewall, and other services, eliminating the need for an external branch router in most environments.